| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Properly handle thread cancelation in rwlock_condvar_t | Tobias Brunner | 2012-09-21 | 1 | -15/+20 | |
| | | ||||||
| * | Use an rwlock in kernel-pfroute too | Tobias Brunner | 2012-09-21 | 1 | -13/+14 | |
| | | ||||||
| * | Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -58/+55 | |
| | | ||||||
| * | Use a separate mutex for cached routes in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -8/+15 | |
| | | ||||||
| * | Added a condvar implementation that works with rwlock_t | Tobias Brunner | 2012-09-21 | 3 | -4/+220 | |
| | | ||||||
| * | Use a lock to safely check and update the time for the next roam event | Tobias Brunner | 2012-09-21 | 1 | -16/+28 | |
| | | ||||||
| * | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 1 | -19/+29 | |
| | | | | | installed | |||||
| * | Changed how kernel-netlink handles virtual IP addresses | Tobias Brunner | 2012-09-21 | 1 | -248/+308 | |
| | | | | | Also tried to avoid the use of enumerators. | |||||
| * | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 10 | -53/+50 | |
| | | | | | Also added an option to enumerate addresses on ignored interfaces. | |||||
| * | Avoid calculating the hash if hashtable is empty | Tobias Brunner | 2012-09-21 | 1 | -0/+5 | |
| | | ||||||
| * | Use a hashtable to quickly check for usable IP addresses/interfaces | Tobias Brunner | 2012-09-21 | 2 | -85/+284 | |
| | | ||||||
| * | Drop packets received on ignored interfaces | Tobias Brunner | 2012-09-21 | 1 | -2/+12 | |
| | | ||||||
| * | Filter ignored interfaces in kernel interfaces (for events, address ↵ | Tobias Brunner | 2012-09-21 | 4 | -61/+134 | |
| | | | | | enumeration, etc.) | |||||
| * | %any is never on a local interface | Tobias Brunner | 2012-09-21 | 2 | -0/+10 | |
| | | ||||||
| * | Avoid memset in is_anyaddr() | Tobias Brunner | 2012-09-21 | 1 | -6/+2 | |
| | | ||||||
| * | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 10 | -65/+62 | |
| | | | | | get_interface() method | |||||
| * | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 10 | -31/+35 | |
| | | ||||||
| * | Added options and a lookup function that will allow filtering of network ↵ | Tobias Brunner | 2012-09-21 | 3 | -3/+72 | |
| | | | | | interfaces | |||||
| * | Make streq() and strcaseeq() static inline functions so they can be used as ↵ | Tobias Brunner | 2012-09-21 | 2 | -26/+32 | |
| | | | | | callbacks | |||||
| * | Use source address in get_nexthop() call | Tobias Brunner | 2012-09-21 | 8 | -12/+19 | |
| | | | | | | Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address. | |||||
| * | Source address lookup refactored | Tobias Brunner | 2012-09-21 | 1 | -146/+221 | |
| | | | | | | | | Routes matching the destination are now first parsed and sorted by network prefix length. This list is then used to search for the best route with a matching preferred source address (if one is specified). This makes sure we really check all routes for that address. | |||||
| * | Check routes with equal prefix if preferred source is specified | Tobias Brunner | 2012-09-21 | 1 | -2/+4 | |
| | | ||||||
| * | Try to find preferred source on interface if returned source does not match | Tobias Brunner | 2012-09-21 | 1 | -10/+29 | |
| | | ||||||
| * | Try to keep the given source address when looking up routes | Tobias Brunner | 2012-09-21 | 1 | -6/+32 | |
| | | | | | | | This allows to pin the local end of an IKE_SA to an address that is not the physical address of an interface. Without this patch the local address would change to the physical address when roam events occur. | |||||
| * | Make sure we propose a dynamic TS if we don't have hosts to derive a TS from | Tobias Brunner | 2012-09-21 | 1 | -10/+8 | |
| | | | | | 7ee37114 removed this behavior. | |||||
| * | In mem_pool, check for an existing ID entry before creating a new one | Martin Willi | 2012-09-20 | 1 | -7/+10 | |
| | | ||||||
| * | As Unity responder, don't change the proposed TS at all, racoon doesn't like ↵ | Martin Willi | 2012-09-18 | 2 | -7/+8 | |
| | | | | | that | |||||
| * | Don't complain about multiple TS in IKEv1, as it supported with Unity | Martin Willi | 2012-09-18 | 1 | -5/+0 | |
| | | ||||||
| * | As initiator, narrow received Unity attributes to configured TS | Martin Willi | 2012-09-18 | 1 | -4/+11 | |
| | | ||||||
| * | When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too | Martin Willi | 2012-09-18 | 1 | -5/+8 | |
| | | ||||||
| * | Enable Cisco Unity only if Unity vendor id received | Martin Willi | 2012-09-18 | 3 | -2/+5 | |
| | | ||||||
| * | Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange | Martin Willi | 2012-09-18 | 1 | -22/+87 | |
| | | ||||||
| * | Add a Unity attribute provider that adds Split-Includes for TS | Martin Willi | 2012-09-18 | 4 | -1/+232 | |
| | | ||||||
| * | Check if subset calculation actually yields a TS in Unity narrowing | Martin Willi | 2012-09-18 | 1 | -1/+5 | |
| | | ||||||
| * | Request Unity configuration attributes for IKEv1 only | Martin Willi | 2012-09-18 | 1 | -0/+6 | |
| | | ||||||
| * | Add Cisco Unity client support for Split-Include and Local-LAN | Martin Willi | 2012-09-18 | 8 | -0/+781 | |
| | | ||||||
| * | Derive a dynamic TS to multiple virtual IPs | Martin Willi | 2012-09-18 | 8 | -118/+160 | |
| | | ||||||
| * | Use the vararg list constructor in quick mode task | Martin Willi | 2012-09-18 | 1 | -16/+8 | |
| | | ||||||
| * | Add a linked list constructor taking items from a vararg list | Martin Willi | 2012-09-18 | 2 | -2/+33 | |
| | | ||||||
| * | Make stroke user-creds work with XAuth configs | Tobias Brunner | 2012-09-18 | 1 | -9/+18 | |
| | | ||||||
| * | Fix Doxygen comment for proposal_keywords_t | Tobias Brunner | 2012-09-18 | 1 | -1/+1 | |
| | | | | | Two dots seem to mark the end of a list. | |||||
| * | New Android release after fixing IDr problems | Tobias Brunner | 2012-09-18 | 1 | -2/+2 | |
| | | ||||||
| * | Use random ports in NetworkManager backend | Tobias Brunner | 2012-09-18 | 1 | -0/+4 | |
| | | ||||||
| * | Fix equality comparison of auth_cfg_t | Tobias Brunner | 2012-09-18 | 1 | -2/+16 | |
| | | | | | | | | We previously only confirmed that rules contained in the first config are also contained in the second, but since the number of rules does not have to be equal, it might be that the second config contains rules that the first one doesn't. | |||||
| * | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 1 | -0/+10 | |
| | | ||||||
| * | Use AUTH_RULE_IDENTITY_LOOSE in NetworkManager backend | Tobias Brunner | 2012-09-18 | 1 | -1/+3 | |
| | | ||||||
| * | android: Use AUTH_RULE_IDENTITY_LOOSE | Tobias Brunner | 2012-09-18 | 1 | -0/+1 | |
| | | ||||||
| * | Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator | Tobias Brunner | 2012-09-18 | 3 | -1/+28 | |
| | | | | | | | If it is set on an auth config IDr will not be sent, and later the configured identity will not only be checked against the returned IDr, but also against other identities contained in the responder's certificate. | |||||
| * | New Android release after fixing Unicode conversion bug | Tobias Brunner | 2012-09-17 | 1 | -2/+2 | |
| | | ||||||
| * | android: Fix conversion of actual Unicode strings (i.e. bytes!=chars) | Tobias Brunner | 2012-09-17 | 1 | -5/+6 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |